Umbraco · Umbraco · CVE-2024-47819
**Name of the Vulnerable Software and Affected Versions**
Umbraco versions 14.0.0 through 14.3.0
Umbraco versions prior to 15.0.0
**Description**
The issue allows for cross-site scripting, which can be leveraged to gain access to higher-privilege endpoints. If a user with admin privileges runs the code, it can potentially elevate all users and grant them admin privileges or access protected content.
**Recommendations**
For Umbraco versions 14.0.0 through 14.3.0, update to version 14.3.1 to resolve the issue.
For Umbraco versions prior to 15.0.0, update to version 15.0.0 to resolve the issue.
As a temporary workaround, ensure that access to the Dictionary section is only granted to trusted users.